本文共 6882 字，大约阅读时间需要 22 分钟。

1. vcapple.com  dev.vpapple.com  qa.vpapple.com  1x.1xx 反向解析  上述 DNS 数据修改时候, 只能够修改 master ( 1x.1xx.132.152 ) 2. 当上述域名数据修改后,  数据会自动同步至 1x.1xx.132.168 (slave) 与 1x.1xx.129.21 (slave) 3. 1x.1xx.132.152 (pdns, master ) 1x.1xx.132.168 (pdns, slave) 与 1x.1xx.129.21 (bind, slave) 4. 1x.1xx.132.152 (pdns, master ) 1x.1xx.132.168 (pdns, slave) 需利用 mysql AB 复制实现数据同步 5. 域名解析在数据库中需要有 NS 记录与 A记录与 SOA 记录 5.1  SOA 为唯一记录 mysql> select domain_id, name, type, content from records where type='SOA'; +-----------+---------------------+------+----------------------------------------------------------------------------+ | domain_id | name                | type | content                                                                    | +-----------+---------------------+------+----------------------------------------------------------------------------+ |         1 | vcapple.com         | SOA  | dns.vcapple.com dns.vcapple.com 201401104 28800 7200 604800 86400          | |         2 | 199.10.in-addr.arpa | SOA  | dns.vcapple.com dns.vcapple.com 201401104 28800 7200 604800 86400          | |         5 | qa.vpapple.com      | SOA  | dns.qa.vpapple.com dns.qa.vpapple.com 2014013002 28800 7200 604800 86400   | |         6 | dev.vpapple.com     | SOA  | dns.dev.vpapple.com dns.dev.vpapple.com 2014013002 28800 7200 604800 86400 | +-----------+---------------------+------+----------------------------------------------------------------------------+ 4 rows in set (0.00 sec) 5.2  NS 记录必须包含所有 DNS 服务器记录 mysql> select domain_id, name,type, content from records where type='NS' and name='vcapple.com'; +-----------+-------------+------+----------------------------------+ | domain_id | name        | type | content                          | +-----------+-------------+------+----------------------------------+ |         1 | vcapple.com | NS   | dns.vcapple.com                  | |         1 | vcapple.com | NS   | dns-slave.vcapple.com            | |         1 | vcapple.com | NS   | xx-xxx-puppet-1xxxx1.vcapple.com | +-----------+-------------+------+----------------------------------+ 3 rows in set (0.00 sec) mysql> select domain_id, name, type, content from recordswhere type='NS' and name='199.10.in-addr.arpa'; +-----------+---------------------+------+----------------------------------+ | domain_id | name                | type | content                          | +-----------+---------------------+------+----------------------------------+ |         2 | 199.10.in-addr.arpa | NS   | dns.vcapple.com                  | |         2 | 199.10.in-addr.arpa | NS   | dns-slave.vcapple.com            | |         2 | 199.10.in-addr.arpa | NS   | xx-xxx-puppet-1xxxx1.vcapple.com | +-----------+---------------------+------+----------------------------------+ 3 rows in set (0.00 sec) 5.3 域名中需要填写对应的 DNS 服务器记录 mysql> select domain_id, name, type, content, ttl from records where type='A' and name='vcapple.com'; +-----------+-------------+------+----------------+------+ | domain_id | name        | type | content        | ttl  | +-----------+-------------+------+----------------+------+ |         1 | vcapple.com | A    | 1x.1xx.132.152 |  360 | |         1 | vcapple.com | A    | 1x.1xx.132.168 |  360 | |         1 | vcapple.com | A    | 1x.1xx.129.21  |  360 | +-----------+-------------+------+----------------+------+ 3 rows in set (0.00 sec) 5.4 必须具备上述主机的 A 记录, 建议具备PTR 记录 mysql> select id, domain_id, name, type, content, ttl from records where type='A' and name in ( 'dns.vcapple.com', 'dns-slave.vcapple.com', 'xx-xxx-puppet-129021.vcapple.com'); +------+-----------+----------------------------------+------+----------------+------+ | id   | domain_id | name                             | type | content        | ttl  | +------+-----------+----------------------------------+------+----------------+------+ | 5407 |         1 | dns-slave.vcapple.com            | A    | 1x.1xx.132.168 | 3306 | | 3965 |         1 | dns.vcapple.com                  | A    | 1x.1xx.132.152 |  360 | | 3672 |         1 | xx-xxx-puppet-1xxxxx.vcapple.com | A    | 1x.1xx.129.21  |  360 | +------+-----------+----------------------------------+------+----------------+------+ 3 rows in set (0.00 sec) 5.5 子域需重新授权 mysql> select id, domain_id, name, type, content, ttl from records where domain_id=1 and type='NS'; +------+-----------+-----------------+------+----------------------------------+------+ | id   | domain_id | name            | type | content                          | ttl  | +------+-----------+-----------------+------+----------------------------------+------+ | 3962 |         1 | vcapple.com     | NS   | dns.vcapple.com                  | 360  | | 5404 |         1 | vcapple.com     | NS   | dns-slave.vcapple.com            | 3306 | | 5418 |         1 | vcapple.com     | NS   | xx-xxx-puppet-129021.vcapple.com |  360 | | 5441 |         1 | dev.vcapple.com | NS   | dns.dev.vcapple.com              |  360 |  <- 子域授权 +------+-----------+-----------------+------+----------------------------------+------+ 4 rows in set (0.00 sec) 6. 经检验 PDNS 新版本才支持通知 bind 进行自动更新 dns 数据功能 [root@pdns-8tedp ~]# rpm -qa | grep pdns pdns-static-3.4.1-1.x86_64 配置简要说明 [root@pdns-8tedp ~]# cat /etc/powerdns/pdns.conf | grep -v "#" | grep -v ^$ allow-axfr-ips=1x.1xx.196.233,1x.1xx.129.21 allow-recursion=1x.1xx.196.233,1x.1xx.129.21 also-notify=1x.1xx.196.233,1x.1xx.129.21    <-- 旧版本不支持该功能, 该功能能够主动通知从服务器进行数据更新 daemon=yes launch=gmysql gmysql-host=127.0.0.1 gmysql-port=3306 gmysql-user=pdns gmysql-dbname=pdns gmysql-password=vipshop guardian=yes master=yes recursor=1x.1xx.129.21 参考测试数据库 mysql> select * from domains; +----+-----------+--------+------------+--------+-----------------+---------+ | id | name      | master | last_check | type   | notified_serial | account | +----+-----------+--------+------------+--------+-----------------+---------+ |  1 | terry.com | NULL   |       NULL | MASTER |               4 | NULL    | +----+-----------+--------+------------+--------+-----------------+---------+ 1 row in set (0.00 sec) mysql> select * from records; +----+-----------+-----------------+------+--------------------------------------------------------+------+------+-------------+----------+-----------+------+ | id | domain_id | name            | type | content                                                | ttl  | prio | change_date | disabled | ordername | auth | +----+-----------+-----------------+------+--------------------------------------------------------+------+------+-------------+----------+-----------+------+ |  1 |         1 | terry.com       | NS   | dns.terry.com                                          | 3360 | NULL |        NULL |        0 | NULL      |    1 | |  3 |         1 | dns.terry.com   | A    | 1x.1xx.197.19                                          | 3360 | NULL |        NULL |        0 | NULL      |    1 | |  4 |         1 | terry.com       | NS   | slave.terry.com                                        | 3360 | NULL |        NULL |        0 | NULL      |    1 | |  5 |         1 | slave.terry.com | A    | 1x.1xx.196.233                                         | 3360 | NULL |        NULL |        0 | NULL      |    1 | |  6 |         1 | ttt.terry.com   | A    | 5.5.5.5                                                | 3360 | NULL |        NULL |        0 | NULL      |    1 | |  7 |         1 | terry.com       | SOA  | dns.terry.com admin.terry.com 4 10800 3600 604800 3600 | 3360 |    0 |        NULL |        0 | NULL      |    1 | +----+-----------+-----------------+------+--------------------------------------------------------+------+------+-------------+----------+-----------+------+ 6 rows in set (0.00 sec) 每次执行DNS 更新, 都需要执行 soa 更新 soa 值来源于上面 domains 表中  notified_serial  列中的值 (select notified_serial from domains where name='terry.com';) 更新 SOA 方法如下, 替换下面关键字 新的 SOA_NUM, 常见新的 SOA 为上一次的数字 +1 的操作 select notified_serial +1 from domains where name='terry.com' update records set content='dns.terry.com admin.terry.com 新的SOA_NUM 10800 3600 604800 3600' where name='terry.com' and type='SOA';

转载地址：http://uonni.baihongyu.com/